Researchers expose Discord webhook C2 in npm, PyPI, RubyGems; North Korean actors published 338 malicious npm packages with ...

Cybersecurity researchers have flagged a new set of 175 malicious packages on the npm registry that have been used to ...

There isn’t a consistent threat model for extension marketplaces yet, McCarthy said, making it difficult for any platform to ...

North Korean hackers used fake recruiter lures and npm packages to target crypto developers in a large-scale supply-chain ...

In light of recent cyberattacks and growing security concerns, GitHub is taking immediate and direct action to secure the open-source software supply chain.

Codex gives software developers a first-rate coding agent in their terminal and their IDE, along with the ability to delegate ...

CERT-In has issued a high-severity warning over a major npm ecosystem compromise named ‘Shai-Hulud,’ targeting credentials linked to Google Cloud, AWS, Microsoft Azure, and developer accounts.

Socket Firewall Free builds upon the company's safe npm tool by extending scanning capabilities beyond the JavaScript/TypeScript ecosystem to Python and Rust. It integrates with the package management ...

Sonatype, a provider of AI-centric DevSecOps, this week released the Open Source Malware Index, Q3 2025, which analyzed ...

The North Korean threat actor behind the Contagious Interview campaign has started combining features from two of its malware ...

There's some tweaks and more details on fishing the north side of Navy Pier this winter since the opening of Navy Pier Marina ...